Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DCKhkQUCYVX3hrwRzmWha2467Mc.roa
File: DCKhkQUCYVX3hrwRzmWha2467Mc.roa (raw, json)
Hash identifier: MipTipd5UCwzPtonDuPdro4guArlZkxWIXfyAAQPVWs=
Subject key identifier: 0C:22:A1:91:05:02:61:55:F7:86:BC:11:CE:65:A1:6B:6E:3A:EC:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869CE43F9A072D9C43E63A408FDF5976E4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DCKhkQUCYVX3hrwRzmWha2467Mc.roa
Signing time: Wed 01 Mar 2023 11:17:29 +0000
ROA not before: Wed 01 Mar 2023 11:17:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:e4:3f:9a:07:2d:9c:43:e6:3a:40:8f:df:59:76:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 11:17:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c22a19105026155f786bc11ce65a16b6e3aecc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:40:5d:91:09:a0:de:d4:fb:a5:15:d2:8b:0f:
ad:43:f9:69:68:0e:2c:13:22:6d:e7:db:c0:32:67:
2d:20:2c:18:5a:dd:9a:0c:77:a7:11:7a:9f:16:e0:
5c:26:8c:7a:f7:8e:e9:1c:1f:d1:13:25:84:8b:45:
c3:a6:94:4f:3c:fc:a4:5e:36:ba:a2:b2:ea:35:d8:
60:a6:4c:40:a9:54:59:de:01:ef:40:9a:43:f4:b8:
c0:c3:7d:95:42:f9:e8:55:67:f8:3b:f6:26:83:d5:
a1:3a:bb:14:ba:fc:5d:c4:97:ce:53:15:49:c8:4a:
df:07:1d:90:88:2f:65:19:e4:c6:5d:a6:58:66:71:
7b:f7:ad:81:01:53:7b:2e:58:18:7b:2e:58:6e:81:
b7:a7:5d:76:1e:3f:f2:93:b3:b1:65:bb:af:92:a6:
28:07:67:e7:64:54:d0:d9:8e:5c:15:9f:ab:b8:4d:
d0:07:f0:3f:48:de:43:27:94:17:bd:7d:b6:11:da:
f4:e2:cb:ae:10:8e:40:21:e3:72:53:ff:f2:73:08:
e3:8b:f5:7b:0f:5d:21:50:9f:eb:39:10:4f:04:26:
67:64:b6:1e:c7:6e:e2:2a:48:65:fe:13:e5:2e:67:
d5:b9:4f:bf:4d:74:78:33:1e:53:71:7e:c7:99:83:
ba:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:22:A1:91:05:02:61:55:F7:86:BC:11:CE:65:A1:6B:6E:3A:EC:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DCKhkQUCYVX3hrwRzmWha2467Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:53:10:8f:ce:29:69:4b:ee:2e:a6:82:a1:73:b3:02:d8:d5:
c8:7c:c5:16:09:29:5d:36:90:4b:2e:31:02:2e:f7:55:ff:56:
3a:5a:26:ab:c7:2b:61:b5:2a:47:61:13:7b:13:0e:03:b5:71:
53:c2:23:3a:ff:e9:b6:f7:45:70:ea:af:b4:f5:87:bb:67:37:
6d:64:f2:db:54:7c:5e:1b:10:6b:e5:96:d1:0f:81:f5:1d:77:
d9:4e:be:7a:05:2f:fc:a5:ef:0d:5a:b6:60:19:6d:f5:f5:0a:
95:92:56:bd:35:59:1c:65:b3:de:11:0d:3c:c4:8d:15:ad:a7:
3b:71:40:0d:41:19:7a:62:70:88:c7:79:ee:56:ae:da:7f:f5:
19:de:34:95:39:13:c8:22:89:52:9b:d9:52:25:95:91:60:37:
45:c2:0f:16:29:57:24:37:b8:98:05:82:92:72:c0:7f:c6:9d:
52:31:1c:c3:32:d2:0f:20:03:38:80:81:f6:64:0e:4a:be:8c:
a1:59:f7:bb:86:43:02:f1:c1:88:6d:da:2c:37:bc:d9:37:c3:
01:19:ca:1e:35:e3:48:d8:6d:d3:a0:f4:c5:36:13:e5:ae:2a:
a1:db:f7:31:12:a7:b3:02:29:5a:6e:ce:71:09:0b:2a:8d:04:
85:17:cf:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:26:13 2025 by rpki-client